Commit bae4a6e3 authored by Till Brehm's avatar Till Brehm
Browse files

Disable the HTTP_PROXY header in the ispconfig and apps vhost files for apache and nginx.

ISPConfig itself does not read nor interpret this header, but there might be other
server components like PHP that might interact with it so I'll disable it just to be sure.
parent f4719e1b
...@@ -15,6 +15,10 @@ ...@@ -15,6 +15,10 @@
SetHandler None SetHandler None
</FilesMatch> </FilesMatch>
<IfModule mod_headers.c>
RequestHeader unset Proxy early
</IfModule>
<IfModule mod_php5.c> <IfModule mod_php5.c>
DocumentRoot {tmpl_var name='apps_vhost_dir'} DocumentRoot {tmpl_var name='apps_vhost_dir'}
AddType application/x-httpd-php .php AddType application/x-httpd-php .php
......
...@@ -82,6 +82,7 @@ NameVirtualHost *:<tmpl_var name="vhost_port"> ...@@ -82,6 +82,7 @@ NameVirtualHost *:<tmpl_var name="vhost_port">
<IfModule mod_headers.c> <IfModule mod_headers.c>
Header always add Strict-Transport-Security "max-age=15768000" Header always add Strict-Transport-Security "max-age=15768000"
RequestHeader unset Proxy early
</IfModule> </IfModule>
<tmpl_if name='apache_version' op='>=' value='2.3.3' format='version'> <tmpl_if name='apache_version' op='>=' value='2.3.3' format='version'>
......
...@@ -40,6 +40,7 @@ server { ...@@ -40,6 +40,7 @@ server {
fastcgi_param GATEWAY_INTERFACE CGI/1.1; fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
fastcgi_param HTTP_PROXY "";
fastcgi_param REMOTE_ADDR $remote_addr; fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port; fastcgi_param REMOTE_PORT $remote_port;
......
...@@ -36,6 +36,7 @@ server { ...@@ -36,6 +36,7 @@ server {
fastcgi_busy_buffers_size 256k; fastcgi_busy_buffers_size 256k;
fastcgi_temp_file_write_size 256k; fastcgi_temp_file_write_size 256k;
fastcgi_read_timeout 1200; fastcgi_read_timeout 1200;
fastcgi_param HTTP_PROXY "";
} }
location ~ /\. { location ~ /\. {
......
...@@ -15,6 +15,10 @@ ...@@ -15,6 +15,10 @@
SetHandler None SetHandler None
</FilesMatch> </FilesMatch>
<IfModule mod_headers.c>
RequestHeader unset Proxy early
</IfModule>
{tmpl_if name="enable_spdy" op="==" value="y"} {tmpl_if name="enable_spdy" op="==" value="y"}
<IfModule spdy_module> <IfModule spdy_module>
SpdyEnabled on SpdyEnabled on
......
...@@ -32,6 +32,7 @@ server { ...@@ -32,6 +32,7 @@ server {
fastcgi_param GATEWAY_INTERFACE CGI/1.1; fastcgi_param GATEWAY_INTERFACE CGI/1.1;
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
fastcgi_param HTTP_PROXY "";
fastcgi_param REMOTE_ADDR $remote_addr; fastcgi_param REMOTE_ADDR $remote_addr;
fastcgi_param REMOTE_PORT $remote_port; fastcgi_param REMOTE_PORT $remote_port;
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment